CVE-2026-58478

creationtimestamp| type| source ---|---|--- 2026-07-14 16:09:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqmlryr46i26 2026-07-22 05:12:26+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mr7krqjcu722...

Windows App Package Installer Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows App Installer allows an authorized attacker to elevate privileges locally...

Microsoft Windows App Store Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Windows App Store allows an authorized attacker to elevate privileges locally...

Microsoft Bing App for IOS Spoofing Vulnerability

Improper restriction of rendered ui layers or frames in Microsoft Bing App for IOS allows an unauthorized attacker to perform spoofing over a network...

Windows App Package Installer Elevation of Privilege Vulnerability

Use after free in Windows App Installer allows an authorized attacker to elevate privileges locally...

Windows App Package Installer Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows App Installer allows an authorized attacker to elevate privileges locally...

Microsoft Windows App Store Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows App Store allows an unauthorized attacker to elevate privileges over a network...

Microsoft Windows App Store Information Disclosure Vulnerability

Use of uninitialized resource in Microsoft Windows App Store allows an authorized attacker to disclose information locally...

Microsoft Windows App Store Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Windows App Store allows an authorized attacker to elevate privileges locally...

CVE-2026-54429

creationtimestamp| type| source ---|---|--- 2026-07-14 10:40:14+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mqlzeisz3w2x 2026-07-14 12:05:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqm64qfivx2k 2026-07-14 12:45:10+00:00| seen|...

CVE-2026-15677

creationtimestamp| type| source ---|---|--- 2026-07-14 09:45:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqlwbuuw7m2e 2026-07-19 20:04:59+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqzlaxlqca2p...

CVE-2026-59961

creationtimestamp| type| source ---|---|--- 2026-07-14 08:28:11+00:00| seen| https://bsky.app/profile/troglobit.com/post/3mqlryf65pc2o...

CVE-2026-60103

creationtimestamp| type| source ---|---|--- 2026-07-14 03:59:38+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqlcy6xwtb26 2026-07-16 08:21:44+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqskp7enn2q...

CVE-2026-12271

creationtimestamp| type| source ---|---|--- 2026-07-14 03:14:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqlai7m3x32c...

Malicious code in flick-test-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67f05e70375ac31032fb4fc3abf302d1c1122bf01504f810aa74d9fe59066d36 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-10522 Malicious code in flick-test-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67f05e70375ac31032fb4fc3abf302d1c1122bf01504f810aa74d9fe59066d36 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

CVE-2026-57371

creationtimestamp| type| source ---|---|--- 2026-07-14 01:08:45+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkzgmybpb2c 2026-07-16 08:15:03+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqs6qb47h2p...

EUVD-2026-43563

luci-app-banip contains a log parsing vulnerability where the awk-based parser extracts the first IPv4 address from log lines regardless of field position, allowing attackers to inject arbitrary IPs via attacker-controlled fields like usernames. An unauthenticated remote attacker can inject an IP...

PT-2026-58140

Name of the Vulnerable Software and Affected Versions Microsoft Windows App Store affected versions not specified Description The use of an uninitialized resource allows an authorized attacker to locally disclose sensitive information, which can impact the system. Recommendations At the moment,...

PT-2026-58158

Name of the Vulnerable Software and Affected Versions Microsoft Windows App Store affected versions not specified Description A race condition occurs when multiple processes access a shared resource concurrently without proper synchronization. In the Microsoft Windows App Store, this flaw allows ...